Internet speeds slow behind ASA 5520

[mazariegosm]

I have two 5520s in a failover configuration. When browsing the internet behind them the speeds average 0.5Mb/1.0Mb Download/Upload. When bypassing the ASAs the speeds increase to 4Mb/6Mb. I have checked the interfaces on the ASAs and there are no errors, collisions, drops, etc.

Also Memory and CPU look great. Any ideas???

Thanks,

Maz

[Julio Carvajal]

Hello,

Do you have an IPS module or CSC module?

Are you inspecting the http protocol over the MPF?

Regards,

Julio

[mazariegosm]

I do have the CSC module, but I have bypassed it and turned off HTTP inspection and still have the same issue.

-Maz

[Julio Carvajal]

Hello Maza,

When you bypass the ASA do you use the same public ip address that when the ASA is there?

Regards,

Julio

[mazariegosm]

I don't use the same one, but use one in the same subnet. If I NAT my PC to a public IP and use it behind the ASA = Slow. If I configure my PC with the public IP and bypass the ASA = fast.

I have also changed the IP in the ASA to a different public IP, but it made no difference.

Thanks for the help by the way.

-Maz

[Julio Carvajal]

Hello Maza,

Can you do a static one to one on the ASA from the laptop pc to the public you use bypassing the ASA to see how it goes?

Also do you have any policing rule? Is this problem http with all the sites?

Regards,

Julio

[mazariegosm]

I have done a static translation, and the result is the same. I'm not doing any policing.

Thanks,

Maz

[Julio Carvajal]

Hello Maza,

Is it possible that you can post your entire configuration ( doing some changes of course due to your network security)

Regards,

Julio